General
- Target 0e6497151c262bfaadf3838ec640c87f.exe
- Size 130KB
- Sample260316-e4z51scv7x
- SHA256 b70588f2def66b443de23193b91b9fe01796232e1cceedeeea23a32f10094e76
- MD5 0e6497151c262bfaadf3838ec640c87f
- SHA1 70d2180b21e420d413095ee47d4285b83ad3b44c
- SHA512 11f321b275de99da0a4727528e5bc64d8e4995fc3c286bb02764a290690f498bb6454e5f252a7641ba5b3ec641d1f97b2e1ddb5e4c8d45a3bad8a99ef1840db5
- SSDEEP 3072:wJvr9PP8JYCBwsioRTwQJvMB2OgtEYdZUbdFz56U1e6w4:wJv5UJYU40TwkMB2OgtEsZK9+4
- TLSH T1A1D36C4B33A450F5D4A7C378C9A25A06E7B378661731A7CF13A4866A6F137D0AD3A331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
0e6497151c262bfaadf3838ec640c87f.exe
Resource
win10v2004-20260129-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0e6497151c262bfaadf3838ec640c87f.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
valleyrat_s2
Version
-
1.0
C2
-
8.222.196.241:2006
-
8.222.196.241:2007
-
127.0.0.1:80
Attributes
-
campaign_date
2026. 3. 8
Targets
-
- Target 0e6497151c262bfaadf3838ec640c87f.exe
- Size 130KB
- SHA256 b70588f2def66b443de23193b91b9fe01796232e1cceedeeea23a32f10094e76
- MD5 0e6497151c262bfaadf3838ec640c87f
- SHA1 70d2180b21e420d413095ee47d4285b83ad3b44c
- SHA512 11f321b275de99da0a4727528e5bc64d8e4995fc3c286bb02764a290690f498bb6454e5f252a7641ba5b3ec641d1f97b2e1ddb5e4c8d45a3bad8a99ef1840db5
- SSDEEP 3072:wJvr9PP8JYCBwsioRTwQJvMB2OgtEYdZUbdFz56U1e6w4:wJv5UJYU40TwkMB2OgtEsZK9+4
- TLSH T1A1D36C4B33A450F5D4A7C378C9A25A06E7B378661731A7CF13A4866A6F137D0AD3A331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects ValleyRAT payload
-
Valleyrat_s2 family